Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
File:                     rqa1YkZ78uEmlnUJYunTMkshJj0.mft (raw, json)
Hash identifier:          I78wQdSYZP4pFiSiTWdtwOOO6pXDwOGh6JtBUw/ekZY=
Subject key identifier:   B3:14:09:F5:52:9E:D8:E6:0B:2B:C8:58:EC:E7:8E:6A:59:C9:DB:72
Authority key identifier: AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
Certificate issuer:       /CN=A9139ECA/serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
Manifest number:          0C
Signing time:             Fri 17 Jul 2026 10:29:54 +0000
Manifest this update:     Fri 17 Jul 2026 10:29:53 +0000
Manifest next update:     Fri 24 Jul 2026 10:29:53 +0000
Files and hashes:         1: rqa1YkZ78uEmlnUJYunTMkshJj0.crl (hash: P/iq2KHCs8m55eu02UC7Fwyxv9quuqvR+msltIwNkpw=)
                          2: 1B0AAFAE7A8C11F1B1F8078C59A30FBC.roa (hash: wfatrlh8uuEwspZHwlBADBh6qz3SMKGJNlNB+wHl+u0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
                          rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139ECA, serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
        Validity
            Not Before: Jul 17 10:29:53 2026 GMT
            Not After : Jul 24 10:29:53 2026 GMT
        Subject: CN=6a5a0421-812b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:79:cf:b4:dc:70:58:9c:e9:d9:06:dd:85:
                    96:7f:85:7a:4d:93:f2:14:64:85:c7:46:15:a4:b0:
                    ab:46:c9:87:4e:f2:13:d5:69:3d:47:45:cf:71:71:
                    ee:96:eb:b8:f2:5e:5c:e3:15:a0:7f:e2:7c:65:db:
                    09:1b:5c:1f:ef:16:af:8b:91:a7:40:6d:cb:a6:9a:
                    e1:d6:22:01:81:8c:12:51:ed:7e:4c:a5:5c:96:7b:
                    14:20:9b:70:7d:aa:37:89:a8:10:19:5a:56:53:ad:
                    bc:4a:cd:4d:37:82:0e:cf:6f:9b:82:c3:2d:9c:00:
                    f9:cd:f4:30:91:5f:8d:44:3c:60:a0:59:91:42:6f:
                    c8:71:f6:18:ed:30:36:85:4a:00:69:e6:b9:6f:6f:
                    c8:9f:1d:40:d6:4f:1d:d8:f3:d3:5f:d1:9f:86:a4:
                    ab:a2:94:2f:c3:b6:a6:35:d1:0c:d9:c7:58:96:57:
                    a7:a5:95:07:05:48:d4:16:63:d5:f7:93:66:d7:fb:
                    30:a9:6a:90:cc:02:6d:c9:84:a5:60:09:e4:1b:01:
                    2c:fe:05:0b:1b:a9:d6:32:db:cc:9d:3b:a0:f6:f9:
                    b1:53:9d:31:11:1f:1e:dd:e3:5f:db:11:71:3b:f5:
                    70:57:ba:22:69:07:f8:8f:f5:45:ea:1f:57:04:c6:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:14:09:F5:52:9E:D8:E6:0B:2B:C8:58:EC:E7:8E:6A:59:C9:DB:72
            X509v3 Authority Key Identifier:
                keyid:AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:f7:79:d3:69:e6:bc:5e:80:6d:4d:c4:3d:02:d1:7f:3c:
         4a:8c:a7:92:17:cb:83:b0:be:a1:07:f8:0b:ee:9d:29:23:6b:
         e0:fc:91:24:75:45:d0:ad:be:b4:c0:c8:b9:ee:4e:96:c8:a4:
         d6:c8:0d:b7:87:4b:50:13:08:d1:25:66:8e:aa:be:c4:d2:5f:
         31:39:7a:d8:c1:06:15:e2:dd:04:45:2a:fe:a9:2f:dc:ba:00:
         8b:ef:24:4b:f4:28:04:23:88:43:df:e6:c9:f2:61:89:b0:60:
         f9:b8:ff:b3:f3:2f:1b:94:6e:8c:d3:7b:73:b1:c7:b5:e4:94:
         12:ef:0c:93:60:71:ad:8a:34:3a:5d:45:15:f7:54:ff:fc:68:
         39:28:09:29:a0:ad:eb:dd:60:28:f0:80:ea:4f:11:6a:ff:06:
         63:81:12:d5:f2:0d:21:17:e2:4e:15:19:e9:58:d2:2e:f9:a4:
         15:76:b3:35:82:50:36:fc:f3:2c:87:d9:5d:bb:ff:ba:41:81:
         d4:84:05:b4:3d:f4:04:79:32:bb:73:08:2d:4e:05:f7:00:a8:
         4d:ad:e1:89:4c:51:70:17:bb:08:e7:96:bc:7d:d4:af:7b:a6:
         f0:ba:99:7f:7e:1c:61:fb:b8:73:fe:87:d4:ef:ff:40:64:6d:
         66:4f:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:41 2026 by rpki-client